Add UserActive to the list of session variables saved during login on the login page.
Then you can add a check for that value in your rule to verify the value is 1. You may even want to create a second rule for it so you can give a different message to someone if they have an account but it isn't active as opposed to not having an account at all and needing to log in.